6 ms·

Well... there are two types of people. Those who do backups and those who will... Seriously, I can't imaging doing something like research or writing PhD thes

Well... there are two types of people. Those who do backups and those who will... Seriously, I can't imaging doing something like research or writing PhD thesis and not having at least one off-site backup. Just get yourself couple of pendrives and rotate them somewhere else than where you live and work. I personally have more data. For my backup needs I use 3 4TB drives, a USB HDD docking station and a script to detect when one of the drives is inserted and make backup of data from all places in my home that I need backed up. I have one drive inserted in the station (once inserted, it will attempt one backup per day). One standing by or in transit and one with the family. At any point in time at least one of those drives is safe with my family which I visit regularly. When I drive there I yank the backup drive from the station, immediately replace it with the standby drive and take the fresh backup with me. When I am going back home, I take the one drive that was previously kept by my family to use it as a standby. It is not complicated, you can do the same with a pendrive. There is no paid software involved, I wrote the script over the years but it is simple and has no extra features. It only detects when the drive is inserted (each has a file with info), makes full/incremental backups (full backup automatically after inserted, incremental every night) and removes old backups and linked increments as needed. Restore is manual as files are just tar.

universenz 6y ago
Not if your USB ports were disabled by Group Policy you can’t.
- lmilcin 6y ago
  I can't imagine students use computers with USB disabled but somebody with some experience may correct.
  - NBJack 6y ago
    You're assuming they: (1) have/had a choice of schools (2) policy didn't change while they were there (3) the students can afford alternatives outside a computer/research lab
    - deleted 6y ago
      [deleted]
    - deleted 6y ago
      [deleted]
  - protomyth 6y ago
    I remember it was done by some folks as an idiotic solution to keeping malware off your computers. It would not surprise me if someone did just that. Although, that would basically force students to use network or cloud drives.
  - ta988 6y ago
    Many use specially authorized locked tablets or chrome laptops that are "safe for exam". highly depends on the place. In some universities students struggle, in other the CS students come with their monsters AlienWare machines to learn how to python...
    - 908B64B197 6y ago
      > Many use specially authorized locked tablets or chrome laptops that are "safe for exam". highly depends on the place. That's a huge red flag when looking at the institution.
      - ta988 6y ago
        For you maybe, but that institution is still ranked high in national and international piss contests so I guess it doesnt matter for most people. I know many devs that work without having an admin or root access on their machines and stalking software on their phones, thats a red flag for me, but not for them apparently.
onli 6y ago
To be fair, this is not data on your own PC or laptop where you know that the disk dies, the data is gone. You'd expect a IT setup by a professional university to have redundant backups for you, so that nothing could go wrong even if something breaks or gets deleted. But depends on the university of course, and it must be hard for students to know how qualified the IT department of their university is.
- deleted 6y ago
  [deleted]
- cosmodisk 6y ago
  You can't expect that,I'm afraid. We have tens of millions of people using all sorts of 'in the cloud' thinking it's as safe, as it can possibly be. Same principle in this case. I do agree on the quality of the uni staff thought.
- ta988 6y ago
  I've never seen that. The only moment I needed a university backup was when a university unit specialized in IT (making websites, databases...) lost 3 months of work on a system they were managing and that we needed to migrate from (to get rid of them and their incompetence). The deal was for them to give us the data on that day, theu just nuked the db, and recycled the hard drives. There were supposedly backups University wide, so I just asked the service handling it (another one) to send me the backups. Thats when they discovered that no backup worked for the last few months for the whole university... Don't ever trust your university with data. Make yourself multiple backups, encrypt them and keep a copy of the key/password in a safe place. I have horror stories linked to each of these reasons. One fun one was the single backup that was plugged when a user opened a "fedex" email and got a cryptolocker that locked all the network drives and the backup. Thankfully the person managing the networked drives had off site backups (and archiving).
  - dspillett 6y ago
    > Don't ever trust your university with data. Make yourself multiple backups More generally: make sure you DR plan, even the simple "I have a backup" one that most people use, involves a second provider (which in some circumstances is your own local resources). Even if the people keeping your data safe on a daily basis are entirely competent, bad things can happen and with centralised control they can happen to many people at once. Even if all the data can be restored you may not be a priority so if you need urgent access to the data having on off-provider copy you can take it from is a godsend. Of course in a commercial setting or some university/research settings, maintaining an off-provider copy of any data may be a _massive_ policy breach. Or even a legal problem is it involves personal or other sensitive data.
amelius 6y ago
How does this scheme protect against ransomware?
- lmilcin 6y ago
  The cycle typically takes couple of weeks which should be enough for me to notice the problem and use one of the drives to restore the files. I don't believe I am susceptible to a ransomware attack, though. All my machines including laptop are Linux and most of the software that contacts outside world (including browser, zoom, etc.) are running within dedicated containers or VMs. Now, this does not make it safe against targeted attacks, but I did not plan it to stand a chance against really determined attacker. I just think no generic ransomware will expect to break out of container or VM.
- owenmarshall 6y ago
  Sounds like it has an RTO of “transit to and from mom/dad’s house” and a RPO of “however often I went to mom/dad’s house” Those are above and beyond what I would personally need to avoid the threat of ransomware. If you need improvements, visit your family more often - win win :)
HenryBemis 6y ago
Very simple 'backup' is to email it to yourself. Ofc it's not a legit backup, but a Word file, even if it's 500 pages, won't take so much space. Pendrive/USB ports may be locked. But you can always zip & email the very critical doc/xls files. This was you can also have 'versioning'. Something that I assume people do, is journaling. So even if you DID lose 1-2-3 months worth of work (in academia) you can read your (handwritten) notes and will save a lot of time from remembering the key points, key resources, etc. Either way, whoever wanted to wipe a couple of computers and managed to push the script to the full AD group.. I got no words. Article doesn't mention what OS they were sitting on, but I will go ahead and assume it's Windows, on an Active Directory, and the admin pushed the new 'think' to the wrong OU.
alpaca128 6y ago
> Seriously, I can't imaging doing something like research or writing PhD thesis and not having at least one off-site backup. And yet people do this. Last year I read a newspaper article of a guy who worked 2 years on his PhD thesis but then forgot his laptop in a bus and now those 2 years of work are gone forever. The real problem here is not just backups, though. It's a severe ignorance of technology and its limitations that leads to such carelessness. The old saying about advanced tech seeming like magic should be a warning. No sane person goes out into the rain without an umbrella thinking they just won't get wet because yesterday they didn't, as it's painfully obvious that water is wet. Yet when someone stores everything on a single point of failure they don't lose a second of sleep of what could go wrong, it's simply not in their perceived range of possibilities that e.g. a hard drive could fail.
CJefferson 6y ago
Depending on what research you are doing (if it includes confidential information about people participating in your experiment for example), taking your own off-site backup is a quick way to get fired / thrown out of your PhD. In this case the University should still provide a good way of you backing everything up of course, and you can still back up anything which isn't confidential.
- lmilcin 6y ago
  They said they have shared drives and these are unaffected. Shared drives are typically backed up by IT. It looks like a perfect place to store backups for most people that don't have a lot of data.
  - mannykannot 6y ago
    One would hope so, but those backups are maintained by the same crew who did this...
PeterStuer 6y ago
People are very, very bad when it comes to proactively mitigating low probability disasters. It is not that it is complicated, although you might underestimate the challenge of having a decent and updated backup that can be restored to the layman inundated with a deluge of commercial offerings trying to outdo each other on interface obtuseness. We seem to instinctively err on the side of avoiding any short term cost, no matter how potentially grave the consequences in the future if the probability of those becomes low or obfuscated. You can see this not just in backups, but in lifestyle choices, business decisions, construction, natural resources, financial speculation ... Any situation where you can say "it does not happen often, but if it does the results will be catastrophic", you can bet that the risks will be unhedged.
- ci5er 6y ago
  Heck, my kids are theoretically engineers (at least their degree says so!), but even buying BackBlaze for them, I can't even get them to hit Ctrl-S from time-to-time. I think their mom must have fucked the milkman, because she is smarter than this herself...

universenz 6y ago

Not if your USB ports were disabled by Group Policy you can’t.

lmilcin 6y ago
I can't imagine students use computers with USB disabled but somebody with some experience may correct.
- NBJack 6y ago
  You're assuming they: (1) have/had a choice of schools (2) policy didn't change while they were there (3) the students can afford alternatives outside a computer/research lab
  - deleted 6y ago
    [deleted]
  - deleted 6y ago
    [deleted]
- protomyth 6y ago
  I remember it was done by some folks as an idiotic solution to keeping malware off your computers. It would not surprise me if someone did just that. Although, that would basically force students to use network or cloud drives.
- ta988 6y ago
  Many use specially authorized locked tablets or chrome laptops that are "safe for exam". highly depends on the place. In some universities students struggle, in other the CS students come with their monsters AlienWare machines to learn how to python...
  - 908B64B197 6y ago
    > Many use specially authorized locked tablets or chrome laptops that are "safe for exam". highly depends on the place. That's a huge red flag when looking at the institution.
    - ta988 6y ago
      For you maybe, but that institution is still ranked high in national and international piss contests so I guess it doesnt matter for most people. I know many devs that work without having an admin or root access on their machines and stalking software on their phones, thats a red flag for me, but not for them apparently.

onli 6y ago

To be fair, this is not data on your own PC or laptop where you know that the disk dies, the data is gone. You'd expect a IT setup by a professional university to have redundant backups for you, so that nothing could go wrong even if something breaks or gets deleted. But depends on the university of course, and it must be hard for students to know how qualified the IT department of their university is.

deleted 6y ago
[deleted]
cosmodisk 6y ago
You can't expect that,I'm afraid. We have tens of millions of people using all sorts of 'in the cloud' thinking it's as safe, as it can possibly be. Same principle in this case. I do agree on the quality of the uni staff thought.
ta988 6y ago
I've never seen that. The only moment I needed a university backup was when a university unit specialized in IT (making websites, databases...) lost 3 months of work on a system they were managing and that we needed to migrate from (to get rid of them and their incompetence). The deal was for them to give us the data on that day, theu just nuked the db, and recycled the hard drives. There were supposedly backups University wide, so I just asked the service handling it (another one) to send me the backups. Thats when they discovered that no backup worked for the last few months for the whole university... Don't ever trust your university with data. Make yourself multiple backups, encrypt them and keep a copy of the key/password in a safe place. I have horror stories linked to each of these reasons. One fun one was the single backup that was plugged when a user opened a "fedex" email and got a cryptolocker that locked all the network drives and the backup. Thankfully the person managing the networked drives had off site backups (and archiving).
- dspillett 6y ago
  > Don't ever trust your university with data. Make yourself multiple backups More generally: make sure you DR plan, even the simple "I have a backup" one that most people use, involves a second provider (which in some circumstances is your own local resources). Even if the people keeping your data safe on a daily basis are entirely competent, bad things can happen and with centralised control they can happen to many people at once. Even if all the data can be restored you may not be a priority so if you need urgent access to the data having on off-provider copy you can take it from is a godsend. Of course in a commercial setting or some university/research settings, maintaining an off-provider copy of any data may be a _massive_ policy breach. Or even a legal problem is it involves personal or other sensitive data.

amelius 6y ago

How does this scheme protect against ransomware?

lmilcin 6y ago
The cycle typically takes couple of weeks which should be enough for me to notice the problem and use one of the drives to restore the files. I don't believe I am susceptible to a ransomware attack, though. All my machines including laptop are Linux and most of the software that contacts outside world (including browser, zoom, etc.) are running within dedicated containers or VMs. Now, this does not make it safe against targeted attacks, but I did not plan it to stand a chance against really determined attacker. I just think no generic ransomware will expect to break out of container or VM.
owenmarshall 6y ago
Sounds like it has an RTO of “transit to and from mom/dad’s house” and a RPO of “however often I went to mom/dad’s house” Those are above and beyond what I would personally need to avoid the threat of ransomware. If you need improvements, visit your family more often - win win :)

HenryBemis 6y ago

Very simple 'backup' is to email it to yourself. Ofc it's not a legit backup, but a Word file, even if it's 500 pages, won't take so much space. Pendrive/USB ports may be locked. But you can always zip & email the very critical doc/xls files. This was you can also have 'versioning'. Something that I assume people do, is journaling. So even if you DID lose 1-2-3 months worth of work (in academia) you can read your (handwritten) notes and will save a lot of time from remembering the key points, key resources, etc. Either way, whoever wanted to wipe a couple of computers and managed to push the script to the full AD group.. I got no words. Article doesn't mention what OS they were sitting on, but I will go ahead and assume it's Windows, on an Active Directory, and the admin pushed the new 'think' to the wrong OU.

alpaca128 6y ago

> Seriously, I can't imaging doing something like research or writing PhD thesis and not having at least one off-site backup. And yet people do this. Last year I read a newspaper article of a guy who worked 2 years on his PhD thesis but then forgot his laptop in a bus and now those 2 years of work are gone forever. The real problem here is not just backups, though. It's a severe ignorance of technology and its limitations that leads to such carelessness. The old saying about advanced tech seeming like magic should be a warning. No sane person goes out into the rain without an umbrella thinking they just won't get wet because yesterday they didn't, as it's painfully obvious that water is wet. Yet when someone stores everything on a single point of failure they don't lose a second of sleep of what could go wrong, it's simply not in their perceived range of possibilities that e.g. a hard drive could fail.

CJefferson 6y ago

Depending on what research you are doing (if it includes confidential information about people participating in your experiment for example), taking your own off-site backup is a quick way to get fired / thrown out of your PhD. In this case the University should still provide a good way of you backing everything up of course, and you can still back up anything which isn't confidential.

lmilcin 6y ago
They said they have shared drives and these are unaffected. Shared drives are typically backed up by IT. It looks like a perfect place to store backups for most people that don't have a lot of data.
- mannykannot 6y ago
  One would hope so, but those backups are maintained by the same crew who did this...

PeterStuer 6y ago

People are very, very bad when it comes to proactively mitigating low probability disasters. It is not that it is complicated, although you might underestimate the challenge of having a decent and updated backup that can be restored to the layman inundated with a deluge of commercial offerings trying to outdo each other on interface obtuseness. We seem to instinctively err on the side of avoiding any short term cost, no matter how potentially grave the consequences in the future if the probability of those becomes low or obfuscated. You can see this not just in backups, but in lifestyle choices, business decisions, construction, natural resources, financial speculation ... Any situation where you can say "it does not happen often, but if it does the results will be catastrophic", you can bet that the risks will be unhedged.

ci5er 6y ago
Heck, my kids are theoretically engineers (at least their degree says so!), but even buying BackBlaze for them, I can't even get them to hit Ctrl-S from time-to-time. I think their mom must have fucked the milkman, because she is smarter than this herself...